Staff IAM Engineer

RiverPark Ventures; New York (NY); On-site; USD 200,000 - 240,000; Full time

Benefits offered by this job

Catered lunches

Healthcare plans

401(k) retirement plan with employer=0

Job summary

CLEAR is seeking a Staff IAM Engineer to design, build, and scale our core identity infrastructure within the Enterprise Security team. You will own IAM challenges, driving secure, frictionless access across the organization and partner across security to mature our IAM posture.

You will lead major initiatives, troubleshoot complex workflows, and implement least-privilege controls in AWS and FedRAMP contexts, while advancing automation and IaC with Terraform.

Qualifications

• 8+ years of hands-on experience in Identity and Access Management and Security Engineering.
• Deep proficiency with Okta (SSO, lifecycle, workflows) and SailPoint (governance, access certifications).
• Strong cloud security background in securing AWS access (IAM policies, roles, SCPs, IAM Identity Center).
• Solid scripting abilities (Python, Bash) to automate IAM workflows and REST APIs.
• Hands-on Terraform experience is a strong plus.
• Relentless perseverance with a self-starter attitude to drive solutions.

Responsibilities

• Lead engineering, architecture, and scaling of core identity platforms (Okta, SailPoint).
• Design and implement least-privilege access controls across AWS and corporate infra.
• Drive automation across IAM lifecycles via scripts and API integration.
• Use Terraform to deploy and manage security configurations consistently.
• Take technical lead on major IAM initiatives from design to deployment.
• Troubleshoot complex identity workflows and access anomalies.

Skills

IAM Engineering

Okta & SailPoint

AWS IAM Security

Python & Bash

Terraform

Self-starter mindset

Job description

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 38 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences.

As a Staff IAM Engineer on the Enterprise Security team, you will design, build, and scale our core identity infrastructure. You take ownership of complex technical challenges and adapt to constraints to deliver reliable access controls. We are looking for an engineer who combines independent execution with the ability to partner closely across the security organization to build secure, frictionless identity solutions.

In this role, you will be instrumental in maturing our Identity and Access Management posture, acting as a key technical driver and subject matter expert for our core identity platforms.

What You'll Do:

• Lead the engineering, architecture, and scaling of our core identity platforms, specifically Okta and SailPoint.
• Design and implement robust, least-privilege access controls across our AWS environments, FedRAMP boundaries, and corporate infrastructure.
• Drive automation across the IAM lifecycle by writing custom scripts and integrating APIs to eliminate manual toil.
• Leverage Infrastructure as Code (Terraform) to deploy and manage security configurations consistently.
• Take the technical lead on major IAM initiatives, navigating roadblocks and driving projects from design through deployment.
• Troubleshoot complex identity workflows, federation issues, and access anomalies.

What You're Great At:

• Experience: 8+ years of hands‑on experience in Identity and Access Management and Security Engineering.
• Core IAM Expertise: Deep administrative and architectural proficiency with Okta (SSO, lifecycle management, advanced workflows) and SailPoint (identity governance, access certifications).
• Cloud Security: Strong background securing AWS access (IAM policies, roles, SCPs, AWS IAM Identity Center).
• Automation & Scripting: Solid coding/scripting abilities (Python, Bash, etc.) to build automations and work with REST APIs.
• Infrastructure as Code: Hands‑on experience with Terraform is a strong plus.
• Mindset: Relentless perseverance and a self‑starter attitude. You push through obstacles, drive issues to resolution despite setbacks, and don't wait for instructions to find vulnerabilities or solve operational inefficiencies.

How You'll be Rewarded:

At CLEAR, we help YOU move forward - because when you’re at your best, we’re at our best. You’ll work with talented team members motivated by our mission of making experiences safer and easier. Our offices are bright and energetic with an open concept and plenty of conference rooms and casual co‑working spaces. We also offer catered lunches every day and have fully stocked kitchens. Outside of the office, we invest in your well‑being and learning & development with stipends and reimbursement programs.

We offer holistic total rewards, including comprehensive healthcare plans, family‑building benefits (fertility and adoption/surrogacy support), flexible time off, annual wellness stipend, free OneMedical memberships for you and your dependents, a CLEAR Plus membership, and a 401(k) retirement plan with employer match. The base salary range for this role is $200,000 - $240,000, depending on levels of skills and experience.

The base salary range represents the low and high end of CLEAR’s salary range for this position. Salaries will vary depending on various factors which include, but are not limited to location, education, skills, experience and performance. The range listed is just one component of CLEAR’s total compensation package for employees and other rewards may include annual bonuses, commission, Restricted Stock Units.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or other characteristics protected by law.

CLEAR provides reasonable accommodation to qualified individuals with disabilities or protected needs. Please let us know if you require a reasonable accommodation to apply for a job or perform your job. Examples of reasonable accommodation include, but are not limited to, time off, extra breaks, making a change to the application process or work procedures, policy exceptions, providing documents in an alternative format, live captioning or using a sign language interpreter, or using specialized equipment.

We are committed to a transparent and secure hiring process. All communications related to this role will come directly from a CLEAR employee through valid CLEAR channels (e.g., a valid @clearme.com email address or verified CLEAR LinkedIn profile). We encourage candidates to remain alert to job scams and to report any suspicious activity.

#LI-Onsite